Privacy policy
Effective June 12, 2026 · uplift.page is operated by Uplift Duo.
What we collect
- Public API requests: route, query text, prompt slug, IP (for rate limiting), user agent, optional model name, latency, status. Retained for analytics and abuse prevention.
- Accounts: email and authentication data, handled by Supabase Auth. Passwords are never visible to us.
- Workspace telemetry: events your systems explicitly send with your ingest key (skill runs, models, durations, repos). This is your data, scoped to your workspace.
- Feedback: outcomes and messages submitted to /v1/feedback, attributed to a prompt and optionally a model.
- Billing: handled by Stripe. We store your Stripe customer/subscription identifiers, never card details.
- Web analytics: Vercel Web Analytics (aggregate, cookieless) on the marketing pages.
What we do with it
Operate the service, show you your own analytics, enforce rate limits and plan quotas, and improve the public prompt library using aggregate feedback.
What we never do
- Sell or share personal data or workspace telemetry with third parties.
- Train models on your private prompts or telemetry.
- Embed hidden tracking in served prompts - removing that is literally the product. Instrumentation on your own prompts is opt-in and visible in the prompt text.
Your controls
- Export: your workspace data is queryable through the dashboard and API at any time.
- Deletion: email privacy@uplift.page to delete your account and workspace data; we complete within 30 days.
- Webhook forwarding: mirror every telemetry event to your own server, so leaving never means losing.
Subprocessors
Supabase (database, auth), Vercel (hosting, web analytics), Stripe (payments).